QwikSec

Security Database

CVE

CWE

Training

CVE-2019-7198

Published: Dec 10, 2020

Modified: Sep 16, 2024

PUBLISHED

Description

This command injection vulnerability allows attackers to execute arbitrary commands in a compromised application. QNAP have already fixed this vulnerability in the following versions of QTS and QuTS hero. QuTS hero h4.5.1.1472 build 20201031 and later QTS 4.5.1.1456 build 20201015 and later QTS 4.4.3.1354 build 20200702 and later

Vendor	Product	Versions
QNAP Systems Inc.	QTS	affected `< 4.5.1.1456` affected `< 4.4.3.1354`
QNAP Systems Inc.	QuTS hero	affected `< h4.5.1.1472`

Weaknesses (CWE)

References

https://www.qnap.com/en/security-advisory/qsa-20-16

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.